Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa
File:                     20570a30-2951-3964-8c53-b4274dd2eabe.roa (raw, json)
Hash identifier:          mtWBewx6FyQinVP+KwDyjb8Se2HpymU7le9p7ETb87A=
Subject key identifier:   EE:0A:4B:45:16:8E:78:E3:1A:26:CC:91:F5:1A:1A:16:38:01:94:90
Certificate issuer:       /CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3
Certificate serial:       010D0C9F4328584EB6E1A65DF4A4297091EE7300
Authority key identifier: 32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     401155
IP address blocks:        2602:819:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a6:5d:f4:a4:29:70:91:ee:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=7707bb25-f556-48a8-807f-3ba1adf900df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:d0:de:3f:d9:83:97:9e:79:9d:72:7b:80:
                    40:96:06:eb:0a:df:a2:d9:12:81:4b:d6:c1:7b:18:
                    72:da:cd:e6:c2:b5:35:e2:de:86:56:f3:d6:47:4c:
                    af:b4:6a:7f:20:1f:4a:96:47:5b:56:89:4b:ac:aa:
                    7e:29:ee:66:f8:44:b4:eb:fd:2c:23:fc:4d:3c:3f:
                    c0:1b:27:8e:d1:83:22:d2:d6:03:14:f1:e1:4d:ae:
                    17:6f:73:84:c9:e2:ad:6b:8e:00:fb:72:30:37:cf:
                    70:57:97:40:80:51:35:98:f4:c9:99:06:c4:26:65:
                    36:67:cd:a1:5f:cb:dc:1f:18:af:b3:34:c5:8a:73:
                    b3:1d:0c:8e:fa:79:64:9d:75:51:85:3b:ba:3a:d9:
                    5d:de:73:a1:05:a7:25:cb:ca:d9:b1:2f:cc:9a:62:
                    1d:90:dd:bb:54:14:3b:62:a0:03:ff:49:8e:47:9a:
                    43:e0:03:75:32:e3:de:fe:1b:72:54:ca:c2:4e:81:
                    5e:42:ff:57:4f:ea:96:b8:d3:8e:df:20:89:6b:4b:
                    e0:33:24:1b:50:0a:ac:b4:89:f5:39:be:87:34:43:
                    78:f0:34:b6:d6:ac:96:be:10:65:63:60:1e:e5:00:
                    2c:c5:74:e5:67:a5:19:20:fe:b6:2e:a6:31:2e:54:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0A:4B:45:16:8E:78:E3:1A:26:CC:91:F5:1A:1A:16:38:01:94:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl

            X509v3 Authority Key Identifier:
                keyid:32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9a:4e:fe:44:33:d9:7e:f5:dc:cd:38:e5:81:40:0a:19:e4:
         db:da:7e:71:2d:0b:61:7b:7b:b4:9d:ec:68:02:e3:dd:4b:e9:
         be:e1:cb:09:61:fb:05:a9:81:f4:c8:c7:64:63:ab:25:b9:87:
         3a:72:9a:65:ba:8c:63:6b:c1:31:dc:dd:cc:24:ed:14:f6:41:
         d8:f0:35:a1:95:25:2e:8a:99:56:cb:4e:1d:05:c9:bd:9b:9e:
         ff:36:1b:2e:3c:4d:76:4c:48:98:ab:c2:ec:1a:ff:3a:6e:3e:
         8d:ad:be:a5:ae:04:3a:06:a2:6f:01:fc:85:12:47:f7:b0:58:
         d7:92:f3:53:b3:ae:f7:92:d3:10:1f:4d:fa:99:cc:a8:cf:85:
         03:5d:ed:61:c6:6a:a7:c0:fc:60:c6:23:f4:04:bb:0f:bc:6f:
         44:0b:96:ac:81:3e:1d:f6:af:2f:dc:ef:f0:f4:a4:1e:e8:03:
         b8:67:05:6c:a1:94:76:9d:a2:2a:65:b5:a1:83:e1:4b:f8:f3:
         56:25:a9:23:4e:5b:91:5a:8b:57:28:3d:9a:10:32:c3:9d:57:
         e0:31:35:1b:ab:a5:8a:1f:64:db:92:a8:b7:44:3b:fd:d2:8e:
         cb:49:96:85:31:59:a2:0f:e0:7e:c9:ee:28:df:40:15:75:fd:
         91:b3:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:09:31 2026 by rpki-client